allo-xyz[.]com

The domain allo-xyz.com is a confirmed phishing site engaged in brand impersonation targeting Google. It was designed to deceive users into believing they were interacting with a legitimate Google service, posing an elevated risk of credential theft or fraud. No crypto drainer kit was identified. The site is currently taken offline, but prior activity indicates it was actively used for Google phishing scams.

Technical indicators confirm the malicious nature of allo-xyz.com. As of analysis, 2 of 95 VirusTotal security vendors flagged the domain, including G-Data and Gridinsoft, which assigned a trust score of 0/100. The domain appears on 2 security blocklists, specifically PhishDestroy and ScamSniffer. Registered through Web Commerce Communications Limited on May 24, 2025, allo-xyz.com resolved to the IP address 192.178.155.104, hosted under AS15169 (Google LLC) in the US. No SSL certificate was present, and the observed page title was 'Google'. Nameservers were SUE.NS.CLOUDFLARE.COM and VIN.NS.CLOUDFLARE.COM. Google Safe Browsing did not flag the domain at the time of assessment.

Users who may have interacted with allo-xyz.com should immediately change their Google account passwords and enable two-factor authentication (2FA) to prevent unauthorized access. Monitor accounts for suspicious activity, such as unauthorized logins or transactions. Report the phishing domain to Google’s abuse team via their reporting page and to anti-phishing organizations like PhishTank or the Anti-Phishing Working Group (APWG). If financial or personal data was exposed, consider contacting relevant institutions to secure accounts.